Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

694746 source statements · aliases may refer to the same vulnerability

CVE-2026-80527Published

ceph: fix hanging __ceph_get_caps() with stale mds_wanted

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-80522Published

crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74748Published

netfilter: ipset: fix refcount race between list:set GC and swap

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74746Published

netfilter: flowtable: publish GC-visible tuple last

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 9.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74745Published

eth: bnxt: avoid deadlock when canceling IRQ affinity notifier

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74744Published

ipvlan: inherit needed_headroom and needed_tailroom from phy_dev

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 9.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111607Published

Jeepay through 3.2.9 IDOR via POST /api/mch/payConfigs

cve-program ·

Vendor product: jeepay

CVSS 4.0 7.1 · CVSS 3.1 7.1Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-107794Published

ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list

cve-program ·

https://cpan.org/modules: ExtUtils-Typemaps-Default

Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111392Published

SGLang through 0.5.21 KV Cache Poisoning via mm_hashes in /generate

cve-program ·

Vendor product: sglang

CVSS 4.0 6.3 · CVSS 3.1 4.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109839Published

IBM Db2 Genius Hub Missing Cryptographic Step

cve-program ·

Vendor product: Db2 Genius Hub

CVSS 3.1 3.1Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-102693Published

RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID

cve-program ·

Vendor product: RIOT

CVSS 3.1 9.6Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111642Published

FastapiAdmin through 3.0 Hard-Coded JWT Secret Privilege Escalation

cve-program ·

Vendor product: FastapiAdmin

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111647Published

PickMall lilishop through 5.0.0 IDOR via /buyer/trade/receipt/{id}

cve-program ·

Vendor product: lilishop

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-110634Published

git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API. Attackers who control a diffed document string can embed $(cmd) or backtic…

nvd ·

CVSS 4.0 · [email protected] · Secondary 9.3 · CVSS 3.1 · [email protected] · Secondary 9.8Source modified 16 Oct 2026Recorded 27 Oct 2026

CVE-2026-110644Published

nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() that allows attackers to execute commands by supplying crafted audio file paths. Attackers can provide file names containing $() command subst…

nvd ·

CVSS 4.0 · [email protected] · Secondary 9.3 · CVSS 3.1 · [email protected] · Secondary 9.8Source modified 16 Oct 2026Recorded 28 Oct 2026

CVE-2026-111652Published

Engineercms through 2.0.5 Missing Authorization via AttachController.Attachment

cve-program ·

Vendor product: engineercms

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-7542Published

Slider Revolution 7.0 - 7.0.10 - Authenticated (Subscriber+) Sensitive Information Disclosure

cve-program ·

Vendor product: Slider Revolution

CVSS 3.1 6.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-55252Published

OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs in openrun can be bypassed by attackers, leading to open re…

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.1Source modified 16 Oct 2026Recorded 25 Oct 2026

CVE-2026-74743Published

macvlan: inherit needed_headroom and needed_tailroom from lowerdev

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 9.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74736Published

net/sched: cls_bpf: reject dev-bound programs bound to a different device

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74730Published

NFS: Pin the 'struct nfs_server' during a FREE_STATEID call

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 9.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74726Published

bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74725Published

enic: fix tx_hang_reset use-after-free on device removal

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74724Published

ipvs: avoid out-of-bounds write in ip_vs_nat_icmp

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74720Published

bpf: Preserve pointer state for commuted arithmetic

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74717Published

net/mlx5: fw_tracer, return NULL on create error

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74714Published

bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74710Published

xsk: require at least 16 bytes of TX metadata

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74708Published

xsk: validate launch-time metadata size

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74707Published

xsk: validate metadata when processing requests

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74705Published

udp: fix potential use-after-free in tunnel segmentation

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 10.0Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74704Published

net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 8.2Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74701Published

net/openvswitch: check Ethernet header length in key_extract()

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74696Published

tcp: fix TFO max_qlen accounting across reuseport migration

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74692Published

net/smc: fix TOCTOU race between smc_listen_out() and listener close

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74689Published

net/atm: fix slab-out-of-bounds read in vcc_setsockopt()

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.1Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74688Published

sctp: clear control chunk transport if it is being removed

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 9.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74678Published

net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74675Published

vt: stabilize tty reference in kbd_keycode with tty_port_tty_get

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74669Published

ipvs: clear IPv4 options after rebasing tunnel ICMP errors

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 9.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74668Published

packet: use consistent hard_header_len in TX_RING send path

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74667Published

net/packet: reset the MAC header on the packet-socket transmit path

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74666Published

packet: synchronize pressure clearing with ring reconfiguration

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74663Published

net/sched: reject overly deep qdisc hierarchies

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74662Published

inet: frags: publish queues before arming timer

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 9.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74660Published

netfilter: ebt_nflog: pin the NFLOG backend

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74656Published

ipv4: fix use-after-free in fib_nhc_update_mtu()

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74651Published

staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 8.1Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74649Published

staging: rtl8723bs: fix missing shared-key auth challenge length check

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 8.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-74648Published

staging: rtl8723bs: validate monitor transmit frame lengths

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 16 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.